Privacy policy

Isle of Man Creamery Ltd

This privacy policy sets out how Isle of Man Creamery Ltd, and other companies within the group, use and protect any information that you give us.

Isle of Man Creamery Ltd is a data controller for the purposes of the Data Protection Act 2018. You can contact us as follows:

Address

Isle of Man Creamery Ltd,

Ballafletcher Farm Road,

Cronkbourne,

Isle of Man,

IM4 4QE

Phone

+44 (0)1624 632000

dpo@isleofmancreamery.com (Data Protection Enquiries only)

customerservices@isleofmancreamery.com (All other enquiries)

What information do we collect?

What	Legal Basis	Why
Name and address	Contract	This is to enable us to deliver the goods to your property or send supplier remittances.
Billing name and address	Contract	If different to your delivery details, we hold these details to send billing information.
Email address	Contract	If you optionally request to receive your billing information electronically, we will hold the relevant email addresses.
Phone number	Legitimate Interest	We may need to keep in touch with you via telephone, such as clarifying a delivery location, or informing you of a problem with a delivery – this is optional.
Bank account information	Contract	We hold bank account details for those customers who pay by Direct Debit, and suppliers we pay via BACS.
Credit card information	Contract	If you pay by credit card, we will use this data to process your payment. No credit card information is retained.
Order amendments	Contract	We record details of changes to your orders as requested by you, including future changes such as holiday cancellations or bank holiday amendments.
Comments and complaints	Legitimate Interest	We record details of comments and complaints made to investigate them fully as per food safety regulations, or for the purposes of improving our services to you.
Delivery location	Legitimate Interest	We record the geographical delivery point of your property to assist us in delivering the product to the correct location.
CCTV (at Creamery premises)	Legitimate Interest	For security, food safety reasons and the prevention of crime, CCTV is recorded on site.
Employee Details	Legitimate Interest	We will hold information you supply to us as part of the recruitment process. This includes, but is not limited to names, addresses and other information you supply.

Depending on your internet browser settings, we may automatically collect cookies if you interact with us through our website. This may include:

Information about your visit to our website,
Technical information used to connect to the website, e.g. IP Address, browser etc.

More details are available on our cookies page.

We may additionally use this information to contact you regarding your experiences with our products and services.

Data is only held for the minimum length we are required to. Once it is no longer required, it is either deleted or anonymised.

No personal data is shared with Isle of Man Dairy USA Company.

How do we protect the information we hold?

We have safeguards in place to ensure that personal data is kept securely. We only permit colleagues to access the information where it is a required part of their role. We will not pass your details to a third party unless we are instructed to do so by a court, or you provide permission for us to do so. We also won’t retain information any longer than we need it.

What we do with the information we gather?

We collect and process the information to ensure you get the service you expect from us. We do not sell any data on to a third party.

We will only collect what information we need and no more. We commit to keeping your information secure whilst we are holding the information. Once the information is no longer needed, we will ensure it is deleted or anonymised.

To assist us in providing with this service, we deal with some third-party companies:

Bacs Payment Schemes Limited (Bacs) – we deal with Bacs to process direct debit payments, and as such they are joint controllers with the bank account information used to set up a direct debit payment.
Worldpay (UK) Limited – for the purposes of processing credit and debit card payments. Please note no credit or debit card data is stored once processed
Noa Bakehouse Limited – Noa will redeliver additional products directly to you if there are any problems or complaints with the original delivery. We will only pass on the details of the complaint and your delivery location.
DotPerformance – for the purposes of signing up new customers and Paperless Direct Debits
NaturalHR – for the purposes of recording candidates information when applying during the recruitment process.

Your Rights

You have a right to access a copy of the data we hold on you. To do so, please send either a letter or email to the details above with details about what data you would like and in what format. Once we have confirmed your identity, we will provide you with a copy within a reasonable timeframe.

You have a right to rectification. If any of the details we hold on you are incorrect, please contact our Customer Services team in the first instance. They will be able to update all the details once we have verified your identity.

You have a right to data portability and may request us to transmit your personal information directly to another organisation.

In exercising your right to restrict processing or right to erasure would mean we need to stop your account and can only erase once all outstanding balances have cleared.

We do not use any automated decision-taking processes.

If you are not satisfied with anything in this privacy policy, please contact us at the details above. Alternatively, may also complain to the Information Commissioner (www.inforights.im) in the Isle of Man, or the relevant supervisory authority.

This privacy policy may be updated from time to time, and the latest copy will be available on our website.

Version: 3